Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create SECURITY.md #7273

Merged
merged 5 commits into from
Jan 4, 2024
Merged

Create SECURITY.md #7273

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
cf2c60b
Create SECURITY.md
joycebrum May 26, 2023
860250b
Merge branch 'ReactiveX:master' into master
joycebrum Sep 15, 2023
fa78844
Merge branch 'ReactiveX:master' into master
joycebrum Sep 22, 2023
00b4ef0
Update SECURITY.md to mention apache liability
joycebrum Dec 26, 2023
dfb1470
Update SECURITY.md: change RxJS writing
joycebrum Dec 26, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
# Security Policy

## Supported Versions

Security updates are applied only to the latest release.

## Reporting a Vulnerability

If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released. Besides, make sure to align with us before any public disclosure to ensure no dangerous information goes public too soon.

Please disclose it at [security advisory](https://github.com/ReactiveX/rxjs/security/advisories/new).

Although we will be working to solve any security issue as fast as possible, it is also important to notice that, in accordance with Apache 2.0 terms, no RxJS contributor can be liable for damages, including the ones caused by a security issue.